gpp_maybe Security update for expat

SUSE-SLE-Module-Basesystem-15-SP3-2022-713

This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168). - CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169). - CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).

• Release Date
  Mar 4 2022
• References
  Bugzilla: 1196168, 1196171, 1196026, 1196169, 1196025
  CVEs: CVE-2022-25314, CVE-2022-25236, CVE-2022-25315, CVE-2022-25235, CVE-2022-25313
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.3 x86_64

• Packages
  expat
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm lock src

  libexpat-devel
  Development files for expat, an XML parser toolkit

  2.2.5-3.15.1 lock rpm

  libexpat1
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm

  libexpat1-32bit
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm

Basesystem Module 15.3 ppc64le

• Packages
  expat
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm lock src

  libexpat-devel
  Development files for expat, an XML parser toolkit

  2.2.5-3.15.1 lock rpm

  libexpat1
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm

Basesystem Module 15.3 aarch64

• Packages
  expat
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm lock src

  libexpat-devel
  Development files for expat, an XML parser toolkit

  2.2.5-3.15.1 lock rpm

  libexpat1
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm

Basesystem Module 15.3 s390x

• Packages
  expat
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm lock src

  libexpat-devel
  Development files for expat, an XML parser toolkit

  2.2.5-3.15.1 lock rpm

  libexpat1
  XML Parser Toolkit

  2.2.5-3.15.1 lock rpm